Why does signing up through Github require the "act on behalf" permission?

That seems risky.